@adminbrooksw (Customer)​ ,

To stand up one or more replica Authentication Manager servers, follow the steps beginning on page 57 of the RSA Authentication Manager 8.7 SP2 Setup and Configuration Guide (or the applicable guide for the version you have in your deployment.

You do not need to worry about the failover.dat (see this explanation of the failover.dat file used by Authentication Manager). That file is created when you generate a new sdconf.rec file for an agent.

You will generate a new replica package from your primary and will be prompted to apply it as you complete Quick Setup on the new replica.

I would recommend completing the replica attachment, then

• If you are using our UDP-based agents, login to the Security Console and rebalance the contact list (Access > Authentication Agents > Authentication Manager Contact List > Automatic Rebalance). An automatic contact list is assigned to each instance in your deployment. The list contains the IP addresses of each instance the contact list is assigned to, up to a limit of 11. Authentication Manager automatically updates these lists each time a new instance is added to the deployment.
• For the MFA Agents (REST-based agents), the agents would need to be updated manually to be told of the new replica.